{"vulnerability": "CVE-2017-9554", "sightings": [{"uuid": "6e2ee812-ff1e-4440-9cb9-861b9837e454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9554", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "464e3692-cf94-4bf9-b905-b0619095d9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9554", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"}, {"uuid": "432e66f1-0fc0-4ce8-ac95-2e45e06de15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9554", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/synology_forget_passwd_user_enum.rb", "content": "", "creation_timestamp": "2020-05-21T21:48:40.000000Z"}, {"uuid": "91e5a654-6eb5-46ce-aeda-26bbddf1c9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9554", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/synology_forget_passwd_user_enum.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"Steve Kaun\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to enumerate users on the Synology NAS\\n          by sending GET requests for the forgot password URL.\\n          The Synology NAS will respond differently if a user is present or not.\\n          These count as login attempts, and the default is 10 logins in 5min to\\n          get a permanent block.  Set delay accordingly to avoid this, as default\\n          is permanent.\\n          Vulnerable DSMs are:\\n          DSM 6.1 < 6.1.3-15152\\n          DSM 6.0 < 6.0.3-8754-4\\n          DSM 5.2 < 5.2-5967-04\", \"disclosure_date\": \"2011-01-05\", \"fullname\": \"auxiliary/scanner/http/synology_forget_passwd_user_enum\", \"is_install_path\": true, \"mod_time\": \"2023-02-03 18:12:53 +0000\", \"name\": \"Synology Forget Password User Enumeration Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"account-lockouts\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/synology_forget_passwd_user_enum.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/synology_forget_passwd_user_enum\", \"references\": [\"EDB-43455\", \"CVE-2017-9554\", \"URL-https://www.synology.com/en-global/security/advisory/Synology_SA_17_29_DSM\"], \"rport\": 5000, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:52.792666Z"}]}